Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
Kustomer
GDPR evidence
Deliver faster, personalized support with Kustomer's AI customer service
Vendor-statedKustomer and GDPR
Kustomer states it holds a data processing agreement. CertReports captured this on 30 Sep 2026 from its trust centre (Vanta); it is a vendor statement, not an independent confirmation.
Evidence
Vendor-statedVendor states GDPR on its trust centre
as of 30 Sep 2026 · confidence 90%Vendor-statedVendor states ISO 27701 on its trust centre
as of 30 Sep 2026 · confidence 90%VerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 31 Jan 2023
- Expires or valid through
- 8 Apr 2027
- Scope
- Kustomer collects personal data from individuals who (i) visit the Kustomer website or request Kustomer to contact them via our online web forms, (ii) request Customer support, or otherwise communicate with Kustomer, including by email, phone calls or texts; (iii) visit a Kustomer office and (iv) register for, attend or otherwise take part in Kustomer events, webinars, surveys or contests. This data identifies, relates to, describes, or is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household, and is used for operating the website, analyzing trends, marketing, and security purposes. Kustomer shares personal data with service providers, advisors, affiliated businesses, and as required by law.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Kustomer, LLC: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 faad085814 |
ExpiredInactive
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Scope
- Kustomer collects and processes Personal Information in connection with our online customer relationship management tool which provides a platform for our business customers to manage their customer care / support (our “Services”). The personal information that Kustomer collects and processes is determined by our customers, but typically includes contact details of our customers’ employees and their end users, user data such as order history or support conversations, and technical data such as IP address or browser information of individuals interacting with the Services. We may also use information collected automatically to improve the Services – for example, this data can tell us how often users use a particular feature of the Services, and we can use that knowledge to make the Services useful to as many users as possible. Kustomer also uses third party services to help in providing our Services pursuant to contracts that limit access to, use and disclosure of personal information stored or processed as part of the services they provide.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Kustomer, Inc.: Inactive | Live pagesha256 121f9c1341 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Kustomer GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
- 18 Sep 2026Subprocessor added: Amazon Web ServicesAmazon Web Services appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: AnthropicAnthropic appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: ClickHouse, Inc.ClickHouse, Inc. appeared on the subprocessor list.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Customer support category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Verint
Customer support
Close the AI outcomes gap with the Verint Open
Gorgias
Customer support
Drive more sales and automate support with AI Agent, Helpdesk integrated to your stack, Chat, FAQ and
Front
Customer support
Customer communications hub for building strong relationships
Sprinklr
Customer support
Sprinklr is a provider of enterprise software solutions that help organizations unify customer-facing functions across digital
Chatwoot
Customer support
The modern, open source, self-hosted AI customer support platform
Intercom
Customer support
Intercom is the only helpdesk with a natively integrated AI Agent, Fin, meaning every customer conversation improves the next one, enabling
Text
Customer support
Your support team talks to more customers than anyone in your
ChurnZero
Customer support
Deliver digital first customer success with ChurnZero software that helps businesses improve the customer experience and drive
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read